3 ms·
Keeping the repository, even as a public archive, would still require a lot of resources on GitHub's side. The only fair thing to do here would be to apologize
by Kwpolska 3y ago
Keeping the repository, even as a public archive, would still require a lot of resources on GitHub's side. The only fair thing to do here would be to apologize and ask for the repo to be deleted.
- rafark 3y agoAnd could be seen as a reward or an encouragement for other people to abuse the service.
- eyelidlessness 3y agoThey already do incentivize white hat exploit efforts[1]. The author seems to have run afoul of one of their rules[2] by impacting other users, but I don’t think that impact could be knowable without trying. GitHub could trivially honor the request without changing the incentives or even taking any defensive implementation action, by specifically citing this experiment in the rules and maybe adding some more specific wording to the TOS. 1: https://bounty.github.com/ https://bounty.github.com/ 2: https://bounty.github.com/#rules https://bounty.github.com/#rules